Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa
File:                     0a38b74a-85f6-3a52-87a5-368b3dfce939.roa (raw, json)
Hash identifier:          Nk6+znsubJP+UpZFLMnqcuHOOvjz/vQrsv95ROo2wac=
Subject key identifier:   34:F9:A4:ED:0F:9D:43:4F:5D:9F:91:0D:D8:3E:E6:15:9F:91:01:23
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61FBEB108D8182007AE880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:fb:eb:10:8d:81:82:00:7a:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=6fe8f654-7dfd-48d5-a967-be20e84371f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:c4:96:f4:92:3c:ef:38:64:2d:7d:21:ab:
                    45:29:0f:b5:6c:39:1d:c0:78:d2:5f:ed:76:3c:f8:
                    1d:9d:44:b9:37:9c:66:95:89:c9:50:65:86:ef:88:
                    17:f5:b3:2e:47:e2:0b:14:57:52:90:0e:e5:58:8a:
                    e6:dd:c3:59:a6:6d:9d:b5:4c:0c:b7:a4:76:a1:f1:
                    98:e6:db:3f:b1:1e:95:6a:b3:95:c6:08:7c:9c:77:
                    28:11:00:6e:f3:0f:c5:25:61:82:22:b0:06:94:9d:
                    32:04:ff:1f:6e:7d:79:e8:0e:62:83:0e:62:a7:61:
                    71:a0:c1:51:0b:4a:9d:4b:d1:63:cb:99:51:c4:17:
                    27:4a:e9:53:4c:96:2d:41:f3:b5:d0:30:11:0d:25:
                    15:76:b2:c1:35:a0:bf:ce:17:de:6b:8d:2f:3f:f2:
                    a4:a0:6a:84:d3:f8:53:b9:c7:79:97:49:94:07:75:
                    6d:4a:b9:ed:75:58:6a:d4:9c:65:f9:cd:98:da:06:
                    0c:9a:ad:ab:4b:26:6b:be:02:5e:47:3e:df:7e:9d:
                    81:17:cb:98:b3:dc:e2:91:6f:92:57:2e:0c:62:92:
                    53:2e:10:0d:ad:01:9f:53:23:8a:6b:d0:9c:77:2f:
                    a6:51:20:03:6a:00:22:79:44:98:2e:c4:0c:3b:86:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F9:A4:ED:0F:9D:43:4F:5D:9F:91:0D:D8:3E:E6:15:9F:91:01:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:8f:86:ce:52:a2:8d:91:47:aa:b5:57:a9:35:21:ae:60:
         3c:ae:d8:30:9e:a9:86:f0:0d:eb:eb:c9:5a:df:a7:7f:65:2e:
         b1:97:24:21:77:cf:b8:e1:88:b6:ce:4c:11:25:af:93:18:46:
         90:f1:f1:43:dc:1b:d9:6b:7d:a7:bb:52:81:e2:52:b4:ad:b1:
         05:60:20:1f:89:1b:77:e3:fc:b7:51:64:96:e5:a9:1e:b8:2e:
         76:12:9a:50:08:93:b2:c9:f4:ee:da:0b:46:19:52:f2:50:d0:
         7a:08:cf:02:08:c3:5c:d4:50:18:01:cd:a6:d8:33:a7:f5:37:
         8a:f1:1d:8f:4b:68:4c:d5:b1:fc:91:53:38:1a:a2:10:25:3b:
         25:94:02:9e:9f:2a:f7:78:7a:ff:6c:20:42:de:32:73:bf:f0:
         bb:14:cd:67:f5:99:33:89:5a:6f:a3:de:d7:03:fd:b9:a6:1b:
         25:2e:40:36:e8:b1:70:4c:1b:7a:9a:f6:a3:c7:5c:12:d8:ac:
         13:07:a1:eb:dc:8b:2b:7c:31:fe:3b:6e:b5:1d:08:82:8c:ad:
         af:db:4d:8a:70:76:fd:ea:82:c5:78:5d:da:cf:cd:f8:9d:b7:
         84:50:22:e7:83:bd:44:1d:50:01:d1:a9:17:55:c3:2e:d4:cf:
         53:b3:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:53 2025 by rpki-client